Senior ICT Cybersecurity Manager

eir business talent; Ireland; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

eir business talent is seeking an IT Security Manager for a public sector client in Ireland. The role combines governance, risk management and hands-on cybersecurity leadership with oversight of third‑party providers and security operations.

The position is hybrid, with two days onsite in Dublin 4 and three days offsite. You will own cyber risk, drive GRC maturity, manage incidents, coordinate MSSP/SOC activities and report to senior stakeholders.

Qualifications

• 7+ years of cybersecurity management and strategy experience.
• Experience leading complex programmes and projects.
• Proven service and vendor management experience.
• Experience maturing GRC environments.
• A recognised formal qualification in cyber security (CISSP, CISM, etc).
• Experience in senior security leadership roles (e.g., IT Security Manager, Security Lead, or vCISO).
• Experience in third-party risk management and using tools like UpGuard.
• Experience in security operations oversight and incident management.
• Experience in supplier management across multi-vendor environments.
• Strong communication and stakeholder engagement skills.

Responsibilities

• Act as lead cybersecurity professional, providing clear direction and ownership of cyber risk.
• Establish and operate a practical security governance framework aligned to size and risk profile.
• Define and maintain client/supplier operating model and responsibilities (RACI).
• Develop and manage a prioritised cybersecurity roadmap.
• Provide regular executive reporting on risk, incidents and overall security posture.
• Own and maintain IT and cybersecurity risk register with treatment tracking.
• Conduct risk assessments across systems and services.
• Support audit and compliance activities (GDPR, NIS2 readiness, audits).
• Maintain security policies, standards and procedures.
• Lead third-party risk assessments and vendor security risk management.

Skills

Cybersecurity Management & Strategy

Leading complex projects/programmes

Service Management

Vendor Management

GRC (Governance, Risk & Compliance)

Formal cybersecurity qualification (C|

Education

Formal qualification in Cyber security (e.g., CISSP, CISM)

Tools

UpGuard

Job description

• Hybrid working model - (2 days onsite (in Dublin 4) / 3 days offsite)

Our public sector client is seeking an experienced IT Security Manager to provide hands‑on leadership, governance, and operational oversight of cybersecurity across the organisation.

This role will act as the internal owner of cybersecurity, responsible for managing cyber risk, overseeing third party security providers and ensuring that they maintain a proportionate, effective, and auditable security posture.

The role combines:

• IT/Cyber Security leadership and governance
• Risk, Compliance, Audit and Third‑party assurance
• Operational oversight of security services
• Practical, hands‑on involvement where required

Mandatory Requirement

You must have the equivalent of:

• 7+ years of extensive professional experience in Cybersecurity Management & Strategy
• Experience in leading complex projects/programmes.
• Experience in Service Management, including Vendor Management
• Experience in maturing GRC (Governance, Risk & Compliance) environments
• A recognised formal qualification in Cyber security (eg. CISSP, CISM etc)
• Relevant Experience in Cybersecurity Leadership Roles - Experience working in similar roles as an IT Security Manager, Security Lead or equivalent (e.g. vCISO), including operating in organisations with limited internal security capability. As part of the response, Tenderers must include a minimum of one relevant example.
• Experience in Cybersecurity Governance, Risk and Compliance - Experience in establishing and operating cybersecurity governance frameworks, including maintaining risk registers, supporting audit/compliance activities, and developing practical policies and standards.
• Experience in Third Party Risk Management (TPRM) - Demonstrable experience in delivering third-party/vendor security risk assessments, including onboarding due diligence, ongoing vendor monitoring, and risk reporting. Experience using tools such as UpGuard (or equivalent platforms) will be considered advantageous.
• Experience in Security Operations Oversight and Incident Management - Experience overseeing outsourced security services (e.g. MSSP/SOC providers), including reviewing incidents, alerting outputs, and vulnerability reporting. Experience in developing and managing incident response processes and coordinating responses to security incidents.
• Experience in Supplier Management and Multi-Vendor Environments - Experience managing third-party IT and security providers, including performance oversight, escalation, and coordination across multiple suppliers operating within a shared responsibility model.
• Communication and Stakeholder Engagement Skills - Experience communicating clearly and effectively with a range of stakeholders, including technical and non-technical audiences and senior management. The response should include examples of how the resource has managed competing priorities, explained risks/issues, and supported decision making.

Cybersecurity Leadership & Governance

• Act as lead cybersecurity professional, providing clear direction and ownership of cyber risk
• Establish and operate a practical security governance framework aligned to size and risk profile
• Define and maintain the Client / supplier operating model and responsibilities (RACI)
• Develop and manage a prioritised cybersecurity roadmap
• Provide regular executive-level reporting on risk, incidents, and overall security posture
• Own and maintain the IT and cybersecurity risk register, including risk identification, assessment, and treatment tracking
• Conduct and facilitate risk assessments across systems and services
• Provide support for audit and compliance activities (e.g. GDPR, NIS2 readiness, internal/external audit)
• Maintain and evolve security policies, standards, and procedures in a pragmatic, implementable manner

Third-Party Risk Management

• Establish and operate a structured third-party / vendor security risk management process
• Lead delivery of third-party risk assessments across suppliers and service providers
• Own and operate the UpGuard platform (or equivalent), including:
• vendor onboarding and assessment
• risk scoring and monitoring
• remediation tracking
• Work with internal stakeholders to ensure:
• ongoing monitoring of critical vendors
• Provide clear reporting on third-party risk exposure and remediation status

Security Operations Oversight

• Act as the primary interface with:
• any existing or future MSSP providers
• Review and challenge:
• security incidents and reports
• alerting and investigation outputs
• vulnerability findings and remediation progress
• Ensure that security issues impacting our client are:
• prioritised
• actioned effectively
• Develop, maintain, and own the Incident Response Plan
• Lead internal coordination during cybersecurity incidents
• Act as escalation point between our client, OGCIO, and third parties
• Conduct post-incident reviews and lessons learned activities
• Plan and facilitate periodic incident response tabletop exercises
• Manage security aspects of key third-party and managed service providers
• Provide informed challenge and oversight to suppliers where required
• Act as liaison between:
• IT
• business stakeholders
• governance / compliance functions (e.g. DPO, Legal)

Hands‑On Security & Project Support

• Provide practical input into:
• projects and new systems
• architecture and design decisions
• Review vulnerability outputs and track remediation progress
• Identify and address security gaps not covered by shared services

Ref: EBT8385

Candidates must be eligible to work full time and long term in the location specified or currently hold a valid appropriate long term work Visa to apply.

eir business talent, eir business and our clients are equal opportunity employers who seeks to recruit and appoint the best available person for a job regardless of marital / civil partnership status, sex (including pregnancy), age, religion, belief, race, nationality and ethnic or national origin, colour, sexual orientation or disability. eir business talent, eir business and our clients apply all relevant Data Protection laws when processing your Personal Data.

If you choose to apply to this opportunity and share your CV or other personal information with eir business talent, eir business and our clients, these details will be held by us in accordance with our privacy policy used by our recruitment team to contact you regarding this or other relevant opportunities at eir business talent and eir business.